But to answer your question: 1)

My bank uses QR code on browser that seems to be dynamic (moving pattern) and you point your mobile’s authentication app with camera to it and it let’s you in.